Vulnerabilities > Expresstech > Quiz AND Survey Master > 8.0.8

DATE CVE VULNERABILITY TITLE RISK
2023-11-13 CVE-2023-26524 Cross-Site Request Forgery (CSRF) vulnerability in Expresstech Quiz and Survey Master
Cross-Site Request Forgery (CSRF) vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin <= 8.0.10 versions.
network
low complexity
expresstech CWE-352
8.8
2023-08-07 CVE-2023-3575 Unspecified vulnerability in Expresstech Quiz and Survey Master
The Quiz And Survey Master WordPress plugin before 8.1.11 does not properly sanitize and escape question titles, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks
network
low complexity
expresstech
5.4